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QUESTION: 150 

You are creating a Microsoft ASP.NET Web site. The Web site includes an administration 
page named admin.aspx. You need to ensure that only the user named Marc can access the 
page. Which code fragment should you use? 


A. <configuration> 

<location path="admin.aspx"> 
<system.web> 
<authorization> 

<allow role="Marc"/> 

<deny users="?"/> 
</authorization> 
</system.web> 

</location> 

</configuration> 

B. <configuration> 

<location path="admin.aspx"> 
<system.web> 
<authorization> 

<allow users="Marc"/> 

<deny users="?"/> 
</authorization> 
</system.web> 

</location> 

</configuration> 

C. <configuration> 

<location path="admin.aspx"> 
<system.web> 
<authorization> 

<allow users="Marc"/> 

<deny users=""*"/> 
</authorization> 
</system.web> 

</location> 

</configuration> 

D. <configuration> 

<location path="admin.aspx"> 
<system.web> 
<authorization> 

<deny users="*"/> 
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<allow users="Marc"/> 
</authorization> 
</system.web> 
</location> 
</configuration> 


Answer: C 


QUESTION: 151 

You have a Microsoft ASP.NET Web application. The application runs in a shared Internet 
Information Services (IIS) application pool.The application retrieves data from an XML 
file. A Windows domain account namedContoso\Maria has access to the file. You need to 
ensure that the application uses Contoso\Maria to access the file. You also need to configure 
impersonation only for the Web application.What should you do? 


A. Configure the IIS application pool to use the Contoso\Maria identity. 

B. Add the following code fragment to the Web.config file. 

<identity impersonate="true" userName="Contoso\Maria" password="secure password" 
/> 

C. Add the following code fragment to the Web.config file. 


<processModel userName="Contoso\Maria" password="secure password" 
comImpersonationLevel="Impersonate" 

/> 

D. Add the following code fragment to the Machine.config file. 

<processModel userName="Contoso\Maria" password="secure password" 
comImpersonationLevel="Impersonate" 

/> 

Answer: B 


QUESTION: 152 

You are creating a Microsoft ASP.NET Web site.The Web site aggregates data from 
various data stores for each employee.The data stores have security access configured for 
each employee based on their identity. You need to ensure that employees can access the 
data stores by using the Web site. Which code fragment should you add to the Web.config 
file? 
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A. <authentication mode="Windows'"> 
<forms> 


</forms> 

</authentication> 

<identity impersonate="false" /> 

B. <authentication mode="Forms"> 
<forms> 


</forms> 

</authentication> 

<authorization> 

<allow users="2" /> 

</authorization> 

C. <authentication mode="Windows"> 
<forms> 


</forms> 

</authentication> 

<authorization> 

<deny users="?" /> 
</authorization> 

<identity impersonate="true" /> 

D. <authentication mode="Forms"> 


<forms> 

</forms> 
</authentication> 
<authorization> 
<allow users="*" /> 
</authorization> 
Answer: C 


QUESTION: 153 

You have a Microsoft ASP.NET Web site that connects to a Microsoft SQL Server 
database. You configure the database to allow only trusted connections. The Web site uses 
WindowsAuthentication to authenticate all users. You create a new domain account named 
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dbUser that has access to the database. You need to ensure that the Web site can access the 
database without allowing each individual user to access the database. 
What should you do? 


A. Grant the Public database role access to the database. 

B. Use the anonymous account when you access the database. 

C. Impersonate the dbUser account when you access the database. 

D. Modify the connection string in the Web.config file to use the dbUser account. 


Answer: C 


QUESTION: 154 

You create a Microsoft ASP.NET Web site. 

The SqlProvider configuration of the Web.config file contains the following code fragment. 
<membership defaultProvider="SqlProvider" userIsOnlineTimeWindow="15"> 
<providers> 

<clear /> 

<add name="SqlProvider" type="System.Web.Security.SqlMembershipProvider" 
connectionStringName="MySqlConnection" applicationName="MyApplication" /> 
</providers> 

</membership> 

You need to ensure that the Web site can store passwords securely. You also need to ensure 
that passwords can be retrieved. 

Which code fragment should you add to the Web.config file? 


A. passwordFormat="Hashed" enablePasswordReset="true" requiresQUESTION NO: 
AndAnswer="false" 

B. passwordFormat="Encrypted" enablePasswordReset="true" requiresQUESTION NO: 
AndAnswer="true" 

C. passwordFormat="Encrypted" enablePasswordRetrieval="true" requiresQUESTION 
NO: AndAnswer="true" 

D. passwordFormat="Clear" enablePasswordRetrieval="true" requiresQUESTION NO: 
AndAnswer="true" 


Answer: C 
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QUESTION: 155 

You create a Web site to use a Microsoft ASP.NET membership provider. You create the 
following roles: 

Admin, Manager, and Employee. 

The Web page contains the following code fragment. 

<asp:LoginView id="LoginView1" runat="server"> 

<RoleGroups> 

<asp:RoleGroup Roles="Admin"> 

<ContentTemplate> 

You are logged in as an administrator. 

</ContentTemplate> 

</asp:RoleGroup> 

</RoleGroups> 

</asp:LoginView 

You need to display a message to authenticated users even if a RoleGroup has not been 
defined for their role. Which code fragment should you add to the LoginView control? 


A. <AnonymousTemplate> Welcome! 
</AnonymousTemplate> 

B. <LoggedInTemplate> Welcome! 
</LoggedInTemplate> 

C. <asp:RoleGroup Roles="User"> 
<ContentTemplate> Welcome! 
</ContentTemplate> 
</asp:RoleGroup> 

D. <asp:RoleGroup Roles="Default"> 
<ContentTemplate> Welcome! 
</ContentTemplate> 
</asp:RoleGroup> 


Answer: B 


QUESTION: 156 

You create a Web site to use a Microsoft ASP.NET membership provider. The Web.config 
file contains the following code fragment. 

<membership defaultProvider="AppProvider"> 

<providers> 

<clear /> 
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<add name="AppProvider" type="System.Web.Security.SqlMembershipProvider" 
connectionStringName="AppConnectionString" applicationName="App" 


requiresUniqueEmail="true" enablePasswordRetrieval="true" requiresSQUESTION 
NO:AndAnswer="true" maxInvalidPasswordAttempts="5" 
minRequiredPasswordLength="7" minRequiredNonalphanumericCharacters="0" 
passwordAttemptWindow="10"/> 

</providers> 

</membership> 


You need to ensure that the following requirements are met: Passwords are stored securely. 
Users can recover their passwords. 
Which attribute should you add to the membership provider configuration? 


A. passwordFormat="Hashed" 

B. passwordFormat="Encrypted" 

C. enablePasswordReset="true" 

D. passwordStrengthRegularExpression="(?!A[0-9]*$)(?!/[a-zA-Z]*$)\([a-zA-Z0- 
9]{6,15})$" 


Answer: B 


QUESTION: 157 

You have a Web site that uses a Microsoft ASP.NET membership provider. You create a 
registration Web page that contains the following code fragment. 

<asp:createuserwizard id="CreateUserWizard1" runat="server"> 

<WizardSteps> 

<asp:CreateUserWizardStep ID="CreateUserWizardStep1" runat="server"/> 
<asp:CompleteWizardStep ID="CompleteWizardStep1" runat="server" /> 

</WizardSteps> 

</asp:createuserwizard> 

You need to ensure that during registration, users type a valid e-mail address on the 
registrationWeb page. Which code fragment should you add to the Page_Load event? 


A. CreateUserWizard1.RequireEmail = true; 

B. CreateUserWizard1.Email = @"[\w-\.]+@([\w-]+\.)+[\w-]{2,4}$"5 

C. CreateUserWizard1.MailDefinition.From = @"[\w-\.]+@([\w-]+\.)+[\w-]{2,4}$"5 

D. CreateUserWizard1.EmailRegularExpression = @"[\w-\.]+@([\w-]+\.)+[\w-]{2,4}$"5 


93 


Answer: D 


QUESTION: 158 

You have a Web site that uses a Microsoft ASP.NET membership provider. You create a 
Web page that contains the following code fragment. 

<asp:LoginStatus id="LoginStatus1" runat="server"> 

You need to ensure that when a user logs out, the Web site redirects the user to the 
ComeBackSoon.aspx page that is located in the same folder. Which code fragment should 
you add to the LoginStatus control? 


A. LogoutAction="Redirect" LogoutText="ComeBackSoon.aspx" 

B. LogoutAction="Refresh" LogoutPageUrl="ComeBackSoon.aspx" 

C. LogoutAction="Redirect" LogoutPageUrl="ComeBackSoon.aspx" 

D. LogoutAction="RedirectToLoginPage" LogoutPageUrl="ComeBackSoon.aspx" 


Answer: C 


QUESTION: 159 

You are creating a Microsoft ASP.NET solution. You need to ensure that the solution will 
support Internet browsers that use Wireless ApplicationProtocol (WAP) and XHTML. What 
should you do? 


A. Create a Microsoft ASP.NET Web site. Add a new Mobile Web Form. 

B. Create a Microsoft ASP.NET Web application. Add a new Web Form. 

C. Create a Microsoft ASP.NET Web application. Add a new Web service. 

D. Create a Microsoft ASP.NET Web site. Add a new Mobile Web configuration file. 


Answer: A 


QUESTION: 160 

You are creating a Microsoft ASP.NET application. The application contains a Mobile Web 
Form.You need to ensure that the Mobile Web Form displays text in different fonts and 
sizes for all labels based on the type of the mobile device that browses the Web site. 
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What should you do? 


A. Add a StyleSheet control to the Mobile Web Form. Add a Style element to the control 
for each mobile device. 

B. Add a StyleSheet control to the Mobile Web Form. Add a PagerStyle element to the 
control for each mobile device. 

C. Add a DeviceSpecific control to the Mobile Web Form. Add a Filter element for each 
mobile device in the deviceFilters section of the Web.config file. 

D. Add a DeviceSpecific control to the Mobile Web Form. Add a Choice element for each 
mobile device in the deviceFilters section of the Web.config file. 


Answer: C 


QUESTION: 161 

You create a Microsoft ASP.NET Web application. The application is accessed both from 
desktop Web browsers and from mobile device Web browsers.You develop a custom 
control. In mobile device browsers, the custom control must contain only a subset of the 
data displayed in the desktop browser.You need to ensure that the application renders 
correctly for both desktop browsers and mobile device browsers. What should you do? 


A. Create a ControlAdapter class for the custom control. 

B. Implement the ITemplate interface in the custom control. 

C. Set the EnableTheming property of the custom control to true. 

D. Set the ClientTarget property of the page that contains the custom control to downlevel. 


Answer: A 


QUESTION: 162 

You create a Microsoft ASP.NET Web application. The application contains a Mobile Web 
Form. You need to ensure that the Mobile Web Form can display a large volume of text 
across multiple pages. What should you do? 


A. Set the Paginate property of the page's Form control to true. 
B. Set the Wrapping property of the page's Form control to Wrap. 
C. Set the Action property of the page's Form control to Paginate. 
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D. Set the PagerStyle-Wrapping property of the page's Form control to Wrap. 


Answer: A 
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